Lunary Stored Cross-Site Scripting Vulnerability in SAML IdP Metadata

A stored cross-site scripting vulnerability has been identified in Lunary versions 1.6.7 and earlier. This issue allows an attacker to inject malicious JavaScript into the SAML Identity Provider XML metadata. The injected script is executed when the SAML login redirect URL is generated, as it is assigned to 'window.location.href' without adequate validation or sanitization. This vulnerability could be exploited to execute arbitrary JavaScript in the user's browser, potentially leading to session hijacking, data theft, or other malicious activities.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user's browser.

Remediation

Users can upgrade to Lunary version 1.7.10 or later to address this vulnerability.